CVE-2022-2188medium

CVE-2022-2188: medium-severity vulnerability in Trellix DXL Broker

DXL Broker privilege escalation vulnerability

Published · Updated

Follow this CVE+ Monitor DXL Broker

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.2%
Privilege escalation vulnerability in DXL Broker for Windows prior to 6.0.0.280 allows local users to gain elevated privileges by exploiting weak directory controls in the logs directory. This can lead to a denial-of-service attack on the DXL Broker.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Affected products
Trellix · DXL Broker